Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
File:                     vp-taLDuXsyl-djVF0C1JgmMvbk.mft (raw, json)
Hash identifier:          jjPpLjvDbSxDpYsBu3/nOJTd0+myaUnRv5fHbP7PC9I=
Subject key identifier:   CC:DE:DD:FF:43:4F:05:7D:98:CD:A1:85:23:65:38:AD:28:11:7A:73
Authority key identifier: BE:9F:AD:68:B0:EE:5E:CC:A5:F9:D8:D5:17:40:B5:26:09:8C:BD:B9
Certificate issuer:       /CN=be9fad68b0ee5ecca5f9d8d51740b526098cbdb9
Certificate serial:       019D9C632DE536B914808B49B484B105B92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
Manifest number:          11
Signing time:             Fri 17 Apr 2026 17:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:38 +0000
Files and hashes:         1: 07sah0NnQZWpGidTlXB7fdm296o.asa (hash: 8mzOawtirTWpJIGxMFep5JeroTrD9KMBn32MsKpltmI=)
                          2: vp-taLDuXsyl-djVF0C1JgmMvbk.crl (hash: DIJ2XILFgLbcwce7GSefPiW6eZ70jmxNXE9ob9kWk3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:2d:e5:36:b9:14:80:8b:49:b4:84:b1:05:b9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9fad68b0ee5ecca5f9d8d51740b526098cbdb9
        Validity
            Not Before: Apr 17 17:00:38 2026 GMT
            Not After : Apr 18 17:00:38 2026 GMT
        Subject: CN=ccdeddff434f057d98cda185236538ad28117a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:73:b0:d8:c3:54:f2:3a:a9:dd:d8:fa:bd:
                    23:6e:8f:09:2c:fc:63:1f:6d:b4:c0:73:8c:4c:ea:
                    34:b6:24:de:17:9e:bc:9c:55:f1:54:ef:92:c3:89:
                    a0:67:33:29:48:82:7f:da:93:91:15:dd:5f:92:9a:
                    3c:fa:d7:4e:90:dc:6d:fc:54:51:cf:e3:d7:88:9e:
                    c7:70:3a:40:6f:e7:18:c6:55:69:96:bf:f7:ea:3a:
                    f9:04:32:31:7a:aa:eb:c4:a3:cc:29:8c:44:cc:f2:
                    7b:1c:b3:8d:e9:0a:6b:5c:ed:63:0d:9b:23:5e:95:
                    69:16:d8:ee:a3:51:bc:00:41:d3:90:d0:43:4d:2e:
                    40:52:df:2c:80:1e:f4:fa:8d:b1:e1:70:dd:16:5c:
                    79:d7:b5:5d:04:ba:29:cd:89:8b:ae:16:a2:c7:56:
                    0d:9d:3d:2e:12:82:84:d5:c4:fd:2a:9e:89:77:0c:
                    5d:6c:0a:6c:01:4f:d0:2e:07:8d:4c:51:c8:f5:fe:
                    94:b1:69:67:33:81:34:b7:50:c7:4f:96:98:b8:aa:
                    a6:59:61:d8:b8:08:e8:8d:64:7e:91:f6:0f:7c:12:
                    a3:fa:4a:dc:80:b4:c4:55:c9:11:fe:21:32:2b:00:
                    99:17:36:ac:ea:f9:ba:26:a0:ce:56:d7:80:1b:36:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DE:DD:FF:43:4F:05:7D:98:CD:A1:85:23:65:38:AD:28:11:7A:73
            X509v3 Authority Key Identifier:
                keyid:BE:9F:AD:68:B0:EE:5E:CC:A5:F9:D8:D5:17:40:B5:26:09:8C:BD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp-taLDuXsyl-djVF0C1JgmMvbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/517612-d4ff-4dcf-af7a-2981728e9d6f/1/vp-taLDuXsyl-djVF0C1JgmMvbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:2f:51:20:a0:cb:63:32:44:9a:74:cd:bf:da:21:94:db:
         45:75:dd:f9:74:59:c5:90:f2:3b:07:ed:eb:55:3e:8f:3a:f5:
         44:24:fd:da:ea:ca:79:cd:67:b5:94:51:84:90:03:65:5f:d6:
         83:bb:01:15:5a:aa:59:2e:e1:1e:b1:af:dc:75:30:37:10:3d:
         4c:3d:17:02:5c:cc:2a:f3:bf:bc:fe:e3:13:b5:67:d9:78:cd:
         08:2e:e3:1c:d7:b1:6b:76:bf:33:23:5b:a3:ee:c4:71:75:71:
         f2:bc:95:f7:79:bf:9c:69:dd:6d:7c:9c:18:ae:43:15:e8:4f:
         12:ae:9e:db:3c:f6:91:e6:65:a9:51:45:50:22:fc:6e:2e:9e:
         3e:21:b4:95:f8:f5:a4:c0:8a:cb:9b:48:43:51:1f:74:a6:86:
         39:78:dc:df:59:88:b4:30:56:6a:ff:55:0b:04:91:5b:91:f4:
         8c:cf:fc:e2:9a:b4:35:54:be:00:38:0d:80:ce:f7:02:fb:68:
         e0:cf:c7:53:77:12:98:f6:3a:10:0c:09:ed:58:9b:81:1c:06:
         ee:1b:80:f2:29:7f:1c:7e:e8:c2:c5:3d:d5:fc:81:f1:87:a1:
         bf:fa:2e:e9:6f:7a:f6:de:5e:3e:d5:08:b5:d5:9c:8f:57:4a:
         23:76:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:41 2026 by rpki-client